{ "generatedAt": "2026-11-04T15:07:42.913Z", "inputs": { "kev": { "repository": "https://github.com/cisagov/kev-data", "commit": "fee9528c7588002b356d4f3288834169677d207b", "url": "https://raw.githubusercontent.com/cisagov/kev-data/fee9528c7588002b356d4f3288834169677d207b/known_exploited_vulnerabilities.json", "catalogVersion": "2026.11.03", "dateReleased": "2026-11-03T20:00:24.8741Z", "count": 1767, "downloadedAtUtc": "2026-11-04T14:33:56Z", "sha256": "0e7e91681f2207c7920a338f0d2b14c67933473ecf9550153627efaaba8d2e4c", "sha256Verified": "0e7e91681f2207c7920a338f0d2b14c67933473ecf9550153627efaaba8d2e4c", "totalEntries": 1767 }, "cveRecords": { "source": "https://cveawg.mitre.org/api/cve/", "files": 40, "statePublished": 40 }, "msrc": { "source": "https://api.msrc.microsoft.com/cvrf/v3.0/Updates('') → documento CVRF mensual", "entriesFound": 32, "notFound": [ "CVE-2009-0556", "CVE-2008-0015", "CVE-2012-1854", "CVE-2009-0238", "CVE-2008-4250", "CVE-2009-1537", "CVE-2010-0249", "CVE-2010-0806" ], "documents": [ "2019-Jul", "2023-Feb", "2023-Nov", "2024-Oct", "2025-Nov", "2026-Apr", "2026-Aug", "2026-Feb", "2026-Jan", "2026-Jul", "2026-May", "2026-Oct", "2026-Sep" ] }, "dataManifestLines": 82 }, "period": { "start": "2026-01-01", "cutoff": "2026-11-03" }, "context": { "totalKevInPeriod": 283, "microsoft": 40, "microsoftSharePct": 14.1, "vendorsDistinct": 106, "secondVendor": [ "Cisco", 20 ], "microsoftRank": 1, "top5Vendors": [ [ "Microsoft", 40 ], [ "Cisco", 20 ], [ "Apple", 9 ], [ "Fortinet", 9 ], [ "Google", 9 ] ], "ransomwareAllInPeriod": 27 }, "volume": { "total": 40, "byMonth": { "2026-01": 3, "2026-02": 8, "2026-03": 1, "2026-04": 8, "2026-05": 7, "2026-07": 5, "2026-08": 4, "2026-09": 3, "2026-10": 1 }, "byCveYear": { "2025": 1, "2026": 27, "≤2015": 8, "2016-2024": 4 }, "legacyMaxYear": 2015, "legacyCount": 8, "legacyByFamily": { "office": 3, "windows": 3, "ie": 2 }, "legacyList": [ { "cve": "CVE-2009-0556", "product": "Office", "dateAdded": "2026-01-07" }, { "cve": "CVE-2008-0015", "product": "Windows", "dateAdded": "2026-02-17" }, { "cve": "CVE-2012-1854", "product": "Visual Basic for Applications (VBA)", "dateAdded": "2026-04-13" }, { "cve": "CVE-2009-0238", "product": "Office", "dateAdded": "2026-04-14" }, { "cve": "CVE-2008-4250", "product": "Windows", "dateAdded": "2026-05-20" }, { "cve": "CVE-2009-1537", "product": "DirectX", "dateAdded": "2026-05-20" }, { "cve": "CVE-2010-0249", "product": "Internet Explorer", "dateAdded": "2026-05-20" }, { "cve": "CVE-2010-0806", "product": "Internet Explorer", "dateAdded": "2026-05-20" } ], "oldestCve": "CVE-2008-0015", "earliestPublishedCve": "CVE-2008-4250", "earliestPublishedDate": "2008-10-23" }, "products": { "rule": "Familia según la primera expresión que calza sobre \"product + vulnerabilityName\" del KEV (ver FAMILIES en analyze.mjs).", "families": [ { "key": "windows", "label": { "es": "Windows y sus componentes", "en": "Windows and its components" }, "n": 17, "pct": 42.5, "ransomware": 1, "sameDayOrBefore": 10, "published2026": 12, "afterPatch2026": 2, "medianDays2026": 0, "forensicTriage": 1, "threeDayDeadline": 2, "threeDayDeadlineBod2604": 2, "threeDayDeadlineBeforeBod2604": [], "cves": [ "CVE-2026-20805", "CVE-2026-21510", "CVE-2026-21513", "CVE-2026-21519", "CVE-2026-21525", "CVE-2026-21533", "CVE-2008-0015", "CVE-2023-36424", "CVE-2025-60710", "CVE-2026-32202", "CVE-2008-4250", "CVE-2009-1537", "CVE-2026-68820", "CVE-2026-33824", "CVE-2026-81963", "CVE-2026-85880", "CVE-2026-96951" ] }, { "key": "sharepoint", "label": { "es": "SharePoint Server", "en": "SharePoint Server" }, "n": 8, "pct": 20, "ransomware": 1, "sameDayOrBefore": 2, "published2026": 8, "afterPatch2026": 6, "medianDays2026": 21.5, "forensicTriage": 6, "threeDayDeadline": 7, "threeDayDeadlineBod2604": 6, "threeDayDeadlineBeforeBod2604": [ "CVE-2026-20963" ], "cves": [ "CVE-2026-20963", "CVE-2026-32201", "CVE-2026-45659", "CVE-2026-56164", "CVE-2026-58644", "CVE-2026-50522", "CVE-2026-55040", "CVE-2026-65660" ] }, { "key": "office", "label": { "es": "Office (Word, PowerPoint, VBA)", "en": "Office (Word, PowerPoint, VBA)" }, "n": 5, "pct": 12.5, "ransomware": 0, "sameDayOrBefore": 2, "published2026": 2, "afterPatch2026": 0, "medianDays2026": 0, "forensicTriage": 0, "threeDayDeadline": 0, "threeDayDeadlineBod2604": 0, "threeDayDeadlineBeforeBod2604": [], "cves": [ "CVE-2009-0556", "CVE-2026-21509", "CVE-2026-21514", "CVE-2012-1854", "CVE-2009-0238" ] }, { "key": "defender", "label": { "es": "Defender", "en": "Defender" }, "n": 3, "pct": 7.5, "ransomware": 1, "sameDayOrBefore": 2, "published2026": 3, "afterPatch2026": 1, "medianDays2026": 0, "forensicTriage": 0, "threeDayDeadline": 0, "threeDayDeadlineBod2604": 0, "threeDayDeadlineBeforeBod2604": [], "cves": [ "CVE-2026-33825", "CVE-2026-41091", "CVE-2026-45498" ] }, { "key": "other", "label": { "es": "Otros (AD FS, Configuration Manager, SQL Server)", "en": "Other (AD FS, Configuration Manager, SQL Server)" }, "n": 3, "pct": 7.5, "ransomware": 0, "sameDayOrBefore": 1, "published2026": 1, "afterPatch2026": 0, "medianDays2026": 0, "forensicTriage": 1, "threeDayDeadline": 1, "threeDayDeadlineBod2604": 1, "threeDayDeadlineBeforeBod2604": [], "cves": [ "CVE-2024-43468", "CVE-2026-56155", "CVE-2019-1068" ] }, { "key": "exchange", "label": { "es": "Exchange Server", "en": "Exchange Server" }, "n": 2, "pct": 5, "ransomware": 1, "sameDayOrBefore": 0, "published2026": 1, "afterPatch2026": 1, "medianDays2026": 1, "forensicTriage": 0, "threeDayDeadline": 0, "threeDayDeadlineBod2604": 0, "threeDayDeadlineBeforeBod2604": [], "cves": [ "CVE-2023-21529", "CVE-2026-42897" ] }, { "key": "ie", "label": { "es": "Internet Explorer", "en": "Internet Explorer" }, "n": 2, "pct": 5, "ransomware": 0, "sameDayOrBefore": 0, "published2026": 0, "afterPatch2026": 0, "medianDays2026": null, "forensicTriage": 0, "threeDayDeadline": 0, "threeDayDeadlineBod2604": 0, "threeDayDeadlineBeforeBod2604": [], "cves": [ "CVE-2010-0249", "CVE-2010-0806" ] } ], "byKevProductField": [ [ "Windows", 14 ], [ "SharePoint", 5 ], [ "Office", 4 ], [ "Defender", 3 ], [ "SharePoint Server", 3 ], [ "Internet Explorer", 2 ], [ "Active Directory Federation Services", 1 ], [ "Configuration Manager", 1 ], [ "DirectX", 1 ], [ "Exchange Server", 1 ], [ "Internet Key Exchange (IKE) Service Extensions", 1 ], [ "Microsoft", 1 ], [ "SQL Server", 1 ], [ "Visual Basic for Applications (VBA)", 1 ], [ "Windows Ancillary Function Driver for WinSock", 1 ] ] }, "types": { "rule": "Impacto según Microsoft: CVRF de MSRC (Threats Type 0); si no hay, título o problemTypes del registro en cve.org.", "withImpact": 32, "withoutImpact": 8, "withoutImpactList": [ "CVE-2009-0556", "CVE-2008-0015", "CVE-2012-1854", "CVE-2009-0238", "CVE-2008-4250", "CVE-2009-1537", "CVE-2010-0249", "CVE-2010-0806" ], "byImpact": [ [ "Elevation of Privilege", 11 ], [ "Remote Code Execution", 9 ], [ "Security Feature Bypass", 6 ], [ "Spoofing", 3 ], [ "Denial of Service", 2 ], [ "Information Disclosure", 1 ] ], "impactSource": { "MSRC CVRF": 32 }, "byCwe": [ [ "CWE-502", 5 ], [ "(sin CWE en KEV)", 4 ], [ "CWE-94", 4 ], [ "CWE-59", 3 ], [ "CWE-693", 3 ], [ "CWE-1220", 2 ], [ "CWE-416", 2 ], [ "CWE-807", 2 ], [ "CWE-122", 1 ], [ "CWE-125", 1 ], [ "CWE-1390", 1 ], [ "CWE-20", 1 ], [ "CWE-200", 1 ], [ "CWE-269", 1 ], [ "CWE-284", 1 ], [ "CWE-306", 1 ], [ "CWE-399", 1 ], [ "CWE-415", 1 ], [ "CWE-426", 1 ], [ "CWE-476", 1 ], [ "CWE-77", 1 ], [ "CWE-79", 1 ], [ "CWE-843", 1 ], [ "CWE-89", 1 ], [ "CWE-908", 1 ] ], "deserializationCwe502": 5, "cwe502ByFamily": { "sharepoint": 4, "exchange": 1 }, "cvss": { "withScore": 40, "bands": { "alta": 27, "media": 6, "crítica": 7 }, "bySource": { "CISA-ADP": 9, "CNA": 31 }, "belowSeven": 6, "median": 8.45 } }, "speed": { "rule": "Días calendario entre cveMetadata.datePublished (cve.org, UTC) y dateAdded del KEV.", "allWithDate": 40, "medianAll": 8, "published2026": 27, "median2026": 0, "max2026": 126, "max2026Cve": "CVE-2026-33824", "within7_2026": 19, "distribution2026": [ { "label": "el mismo día o antes", "en": "same day or earlier", "n": 17 }, { "label": "1–7 días", "en": "1–7 days", "n": 2 }, { "label": "8–30 días", "en": "8–30 days", "n": 3 }, { "label": "31–365 días", "en": "31–365 days", "n": 5 }, { "label": "más de 1 año", "en": "more than 1 year", "n": 0 } ], "distributionAll": [ { "label": "el mismo día o antes", "en": "same day or earlier", "n": 17 }, { "label": "1–7 días", "en": "1–7 days", "n": 2 }, { "label": "8–30 días", "en": "8–30 days", "n": 3 }, { "label": "31–365 días", "en": "31–365 days", "n": 6 }, { "label": "más de 1 año", "en": "more than 1 year", "n": 12 } ], "publishedBefore2026": 13, "medianYearsOlderThan2026": 16, "published2026OnPatchTuesday": 22, "published2026OutOfBand": 5, "addedOnPatchTuesday": 15, "afterPatch2026": 10, "afterPatch2026Median": 24.5, "publishedMatchesMsrcFirstRevision": 28, "publishedWithMsrcFirstRevision": 32, "publishedMismatchMsrcCount": 4, "publishedMismatchMsrc": [ { "cve": "CVE-2026-41091", "cveOrg": "2026-05-20", "msrc": "2026-05-19" }, { "cve": "CVE-2026-45498", "cveOrg": "2026-05-20", "msrc": "2026-05-19" }, { "cve": "CVE-2026-45659", "cveOrg": "2026-05-22", "msrc": "2026-05-21" }, { "cve": "CVE-2019-1068", "cveOrg": "2019-07-15", "msrc": "2019-07-09" } ], "patchTuesdays2026": [ "2026-01-13", "2026-02-10", "2026-03-10", "2026-04-14", "2026-05-12", "2026-06-09", "2026-07-14", "2026-08-11", "2026-09-08", "2026-10-13" ] }, "zeroDay": { "rule": "Día cero = la CVE ingresó al KEV el mismo día de su publicación en cve.org o antes (dateAdded − datePublished ≤ 0): cuando Microsoft publicó el parche, CISA ya tenía evidencia de explotación. Contraste: marca \"Exploited:Yes\" en el CVRF de MSRC.", "count": 17, "pct": 42.5, "pctOf2026Published": 63, "onPatchTuesday": 14, "outOfBand": 3, "outOfBandByFamily": { "office": 1, "defender": 2 }, "outOfBandList": [ { "cve": "CVE-2026-21509", "family": "office", "published": "2026-01-26" }, { "cve": "CVE-2026-41091", "family": "defender", "published": "2026-05-20" }, { "cve": "CVE-2026-45498", "family": "defender", "published": "2026-05-20" } ], "sensitivityWithin1Day": 18, "alsoMsrcExploited": 17, "alsoPubliclyDisclosed": 5, "byFamily": { "windows": 10, "office": 2, "sharepoint": 2, "defender": 2, "other": 1 }, "byImpact": [ [ "Elevation of Privilege", 8 ], [ "Security Feature Bypass", 5 ], [ "Denial of Service", 2 ], [ "Information Disclosure", 1 ], [ "Spoofing", 1 ] ], "list": [ { "cve": "CVE-2026-20805", "family": "windows", "impact": "Information Disclosure", "published": "2026-01-13", "dateAdded": "2026-01-13", "msrcExploited": true }, { "cve": "CVE-2026-21509", "family": "office", "impact": "Security Feature Bypass", "published": "2026-01-26", "dateAdded": "2026-01-26", "msrcExploited": true }, { "cve": "CVE-2026-21510", "family": "windows", "impact": "Security Feature Bypass", "published": "2026-02-10", "dateAdded": "2026-02-10", "msrcExploited": true }, { "cve": "CVE-2026-21513", "family": "windows", "impact": "Security Feature Bypass", "published": "2026-02-10", "dateAdded": "2026-02-10", "msrcExploited": true }, { "cve": "CVE-2026-21514", "family": "office", "impact": "Security Feature Bypass", "published": "2026-02-10", "dateAdded": "2026-02-10", "msrcExploited": true }, { "cve": "CVE-2026-21519", "family": "windows", "impact": "Elevation of Privilege", "published": "2026-02-10", "dateAdded": "2026-02-10", "msrcExploited": true }, { "cve": "CVE-2026-21525", "family": "windows", "impact": "Denial of Service", "published": "2026-02-10", "dateAdded": "2026-02-10", "msrcExploited": true }, { "cve": "CVE-2026-21533", "family": "windows", "impact": "Elevation of Privilege", "published": "2026-02-10", "dateAdded": "2026-02-10", "msrcExploited": true }, { "cve": "CVE-2026-32201", "family": "sharepoint", "impact": "Spoofing", "published": "2026-04-14", "dateAdded": "2026-04-14", "msrcExploited": true }, { "cve": "CVE-2026-41091", "family": "defender", "impact": "Elevation of Privilege", "published": "2026-05-20", "dateAdded": "2026-05-20", "msrcExploited": true }, { "cve": "CVE-2026-45498", "family": "defender", "impact": "Denial of Service", "published": "2026-05-20", "dateAdded": "2026-05-20", "msrcExploited": true }, { "cve": "CVE-2026-56155", "family": "other", "impact": "Elevation of Privilege", "published": "2026-07-14", "dateAdded": "2026-07-14", "msrcExploited": true }, { "cve": "CVE-2026-56164", "family": "sharepoint", "impact": "Elevation of Privilege", "published": "2026-07-14", "dateAdded": "2026-07-14", "msrcExploited": true }, { "cve": "CVE-2026-68820", "family": "windows", "impact": "Elevation of Privilege", "published": "2026-08-11", "dateAdded": "2026-08-11", "msrcExploited": true }, { "cve": "CVE-2026-81963", "family": "windows", "impact": "Elevation of Privilege", "published": "2026-09-08", "dateAdded": "2026-09-08", "msrcExploited": true }, { "cve": "CVE-2026-85880", "family": "windows", "impact": "Elevation of Privilege", "published": "2026-09-08", "dateAdded": "2026-09-08", "msrcExploited": true }, { "cve": "CVE-2026-96951", "family": "windows", "impact": "Security Feature Bypass", "published": "2026-10-13", "dateAdded": "2026-10-13", "msrcExploited": true } ], "msrcExploitedTotal": 20, "msrcExploitedNotSameDay": [ { "cve": "CVE-2026-32202", "daysToKev": 14 }, { "cve": "CVE-2026-42897", "daysToKev": 1 }, { "cve": "CVE-2026-58644", "daysToKev": 2 } ], "msrcEntriesFound": 32 }, "ransomware": { "rule": "knownRansomwareCampaignUse = \"Known\" en el KEV (valor vigente en la versión descargada).", "count": 4, "pct": 10, "allKevPeriodPct": 9.5, "sameDayOrBefore": 0, "medianDaysToKev": 96.5, "list": [ { "cve": "CVE-2023-21529", "family": "exchange", "product": "Exchange Server", "dateAdded": "2026-04-13", "impact": "Remote Code Execution", "cwes": [ "CWE-502" ] }, { "cve": "CVE-2025-60710", "family": "windows", "product": "Windows", "dateAdded": "2026-04-13", "impact": "Elevation of Privilege", "cwes": [ "CWE-59" ] }, { "cve": "CVE-2026-33825", "family": "defender", "product": "Defender", "dateAdded": "2026-04-22", "impact": "Elevation of Privilege", "cwes": [ "CWE-1220" ] }, { "cve": "CVE-2026-45659", "family": "sharepoint", "product": "SharePoint Server", "dateAdded": "2026-07-01", "impact": "Remote Code Execution", "cwes": [ "CWE-502" ] } ] }, "deadlines": { "rule": "dueDate − dateAdded del KEV, en días calendario (plazo obligatorio para agencias federales de EE. UU.).", "distribution": { "3": 10, "14": 19, "21": 11 }, "threshold": 3, "threeDaysOrLess": 10, "threeDaysOrLessByFamily": { "sharepoint": 7, "windows": 2, "other": 1 }, "threeDaysOrLessList": [ "CVE-2026-20963", "CVE-2026-45659", "CVE-2026-56164", "CVE-2026-58644", "CVE-2026-50522", "CVE-2026-33824", "CVE-2026-55040", "CVE-2019-1068", "CVE-2026-65660", "CVE-2026-96951" ], "median": 14, "forensicTriage": 8, "forensicTriageByFamily": { "sharepoint": 6, "other": 1, "windows": 1 }, "forensicTriageList": [ "CVE-2026-45659", "CVE-2026-56164", "CVE-2026-58644", "CVE-2026-50522", "CVE-2026-55040", "CVE-2019-1068", "CVE-2026-65660", "CVE-2026-96951" ], "forensicTriageAllKevPeriod": 97, "firstForensicTriageDateAdded": "2026-06-25", "fromFirstForensicTriage": { "microsoftEntries": 13, "forensicTriage": 8, "threeDays": 9 }, "threeDaysWithoutForensicTriage": [ "CVE-2026-20963", "CVE-2026-33824" ] }, "entries": [ { "cve": "CVE-2009-0556", "cveYear": 2009, "product": "Office", "family": "office", "vulnerabilityName": "Microsoft Office PowerPoint Code Injection Vulnerability", "title": null, "dateAdded": "2026-01-07", "dueDate": "2026-01-28", "dueDays": 21, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-94" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2009-04-03", "daysToKev": 6123, "publishedOnPatchTuesday": false, "addedOnPatchTuesday": false, "sameDayOrBefore": false, "impact": null, "impactSource": null, "msrcDocument": null, "msrcFirstRevision": null, "msrcExploited": false, "msrcPubliclyDisclosed": false, "msrcExploitString": null, "cvss": 8.8, "cvssVersion": "cvssV3_1", "cvssSource": "CISA-ADP", "cvssBand": "alta" }, { "cve": "CVE-2026-20805", "cveYear": 2026, "product": "Windows", "family": "windows", "vulnerabilityName": "Microsoft Windows Information Disclosure Vulnerability", "title": "Desktop Window Manager Information Disclosure Vulnerability", "dateAdded": "2026-01-13", "dueDate": "2026-02-03", "dueDays": 21, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-200" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-01-13", "daysToKev": 0, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": true, "sameDayOrBefore": true, "impact": "Information Disclosure", "impactSource": "MSRC CVRF", "msrcDocument": "2026-Jan", "msrcFirstRevision": "2026-01-13", "msrcExploited": true, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected", "cvss": 5.5, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "media" }, { "cve": "CVE-2026-21509", "cveYear": 2026, "product": "Office", "family": "office", "vulnerabilityName": "Microsoft Office Security Feature Bypass Vulnerability", "title": "Microsoft Office Security Feature Bypass Vulnerability", "dateAdded": "2026-01-26", "dueDate": "2026-02-16", "dueDays": 21, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-807" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-01-26", "daysToKev": 0, "publishedOnPatchTuesday": false, "addedOnPatchTuesday": false, "sameDayOrBefore": true, "impact": "Security Feature Bypass", "impactSource": "MSRC CVRF", "msrcDocument": "2026-Jan", "msrcFirstRevision": "2026-01-26", "msrcExploited": true, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected", "cvss": 7.8, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "alta" }, { "cve": "CVE-2026-21510", "cveYear": 2026, "product": "Windows", "family": "windows", "vulnerabilityName": "Microsoft Windows Shell Protection Mechanism Failure Vulnerability", "title": "Windows Shell Security Feature Bypass Vulnerability", "dateAdded": "2026-02-10", "dueDate": "2026-03-03", "dueDays": 21, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-693" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-02-10", "daysToKev": 0, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": true, "sameDayOrBefore": true, "impact": "Security Feature Bypass", "impactSource": "MSRC CVRF", "msrcDocument": "2026-Feb", "msrcFirstRevision": "2026-02-10", "msrcExploited": true, "msrcPubliclyDisclosed": true, "msrcExploitString": "Publicly Disclosed:Yes;Exploited:Yes;Latest Software Release:Exploitation Detected", "cvss": 8.8, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "alta" }, { "cve": "CVE-2026-21513", "cveYear": 2026, "product": "Windows", "family": "windows", "vulnerabilityName": "Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability", "title": "MSHTML Framework Security Feature Bypass Vulnerability", "dateAdded": "2026-02-10", "dueDate": "2026-03-03", "dueDays": 21, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-693" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-02-10", "daysToKev": 0, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": true, "sameDayOrBefore": true, "impact": "Security Feature Bypass", "impactSource": "MSRC CVRF", "msrcDocument": "2026-Feb", "msrcFirstRevision": "2026-02-10", "msrcExploited": true, "msrcPubliclyDisclosed": true, "msrcExploitString": "Publicly Disclosed:Yes;Exploited:Yes;Latest Software Release:Exploitation Detected", "cvss": 8.8, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "alta" }, { "cve": "CVE-2026-21514", "cveYear": 2026, "product": "Office", "family": "office", "vulnerabilityName": "Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability", "title": "Microsoft Word Security Feature Bypass Vulnerability", "dateAdded": "2026-02-10", "dueDate": "2026-03-03", "dueDays": 21, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-807" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-02-10", "daysToKev": 0, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": true, "sameDayOrBefore": true, "impact": "Security Feature Bypass", "impactSource": "MSRC CVRF", "msrcDocument": "2026-Feb", "msrcFirstRevision": "2026-02-10", "msrcExploited": true, "msrcPubliclyDisclosed": true, "msrcExploitString": "Publicly Disclosed:Yes;Exploited:Yes;Latest Software Release:Exploitation Detected", "cvss": 7.8, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "alta" }, { "cve": "CVE-2026-21519", "cveYear": 2026, "product": "Windows", "family": "windows", "vulnerabilityName": "Microsoft Windows Type Confusion Vulnerability", "title": "Desktop Window Manager Elevation of Privilege Vulnerability", "dateAdded": "2026-02-10", "dueDate": "2026-03-03", "dueDays": 21, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-843" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-02-10", "daysToKev": 0, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": true, "sameDayOrBefore": true, "impact": "Elevation of Privilege", "impactSource": "MSRC CVRF", "msrcDocument": "2026-Feb", "msrcFirstRevision": "2026-02-10", "msrcExploited": true, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected", "cvss": 7.8, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "alta" }, { "cve": "CVE-2026-21525", "cveYear": 2026, "product": "Windows", "family": "windows", "vulnerabilityName": "Microsoft Windows NULL Pointer Dereference Vulnerability", "title": "Windows Remote Access Connection Manager Denial of Service Vulnerability", "dateAdded": "2026-02-10", "dueDate": "2026-03-03", "dueDays": 21, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-476" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-02-10", "daysToKev": 0, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": true, "sameDayOrBefore": true, "impact": "Denial of Service", "impactSource": "MSRC CVRF", "msrcDocument": "2026-Feb", "msrcFirstRevision": "2026-02-10", "msrcExploited": true, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected", "cvss": 6.2, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "media" }, { "cve": "CVE-2026-21533", "cveYear": 2026, "product": "Windows", "family": "windows", "vulnerabilityName": "Microsoft Windows Improper Privilege Management Vulnerability", "title": "Windows Remote Desktop Services Elevation of Privilege Vulnerability", "dateAdded": "2026-02-10", "dueDate": "2026-03-03", "dueDays": 21, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-269" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-02-10", "daysToKev": 0, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": true, "sameDayOrBefore": true, "impact": "Elevation of Privilege", "impactSource": "MSRC CVRF", "msrcDocument": "2026-Feb", "msrcFirstRevision": "2026-02-10", "msrcExploited": true, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected", "cvss": 7.8, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "alta" }, { "cve": "CVE-2024-43468", "cveYear": 2024, "product": "Configuration Manager", "family": "other", "vulnerabilityName": "Microsoft Configuration Manager SQL Injection Vulnerability", "title": "Microsoft Configuration Manager Remote Code Execution Vulnerability", "dateAdded": "2026-02-12", "dueDate": "2026-03-05", "dueDays": 21, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-89" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2024-10-08", "daysToKev": 492, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": false, "sameDayOrBefore": false, "impact": "Remote Code Execution", "impactSource": "MSRC CVRF", "msrcDocument": "2024-Oct", "msrcFirstRevision": "2024-10-08", "msrcExploited": false, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely", "cvss": 9.8, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "crítica" }, { "cve": "CVE-2008-0015", "cveYear": 2008, "product": "Windows", "family": "windows", "vulnerabilityName": "Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability", "title": null, "dateAdded": "2026-02-17", "dueDate": "2026-03-10", "dueDays": 21, "ransomware": false, "forensicTriage": false, "cwes": [], "recordState": "PUBLISHED", "msrcCached": true, "published": "2009-07-07", "daysToKev": 6069, "publishedOnPatchTuesday": false, "addedOnPatchTuesday": false, "sameDayOrBefore": false, "impact": null, "impactSource": null, "msrcDocument": null, "msrcFirstRevision": null, "msrcExploited": false, "msrcPubliclyDisclosed": false, "msrcExploitString": null, "cvss": 8.8, "cvssVersion": "cvssV3_1", "cvssSource": "CISA-ADP", "cvssBand": "alta" }, { "cve": "CVE-2026-20963", "cveYear": 2026, "product": "SharePoint", "family": "sharepoint", "vulnerabilityName": "Microsoft SharePoint Deserialization of Untrusted Data Vulnerability", "title": "Microsoft SharePoint Remote Code Execution Vulnerability", "dateAdded": "2026-03-18", "dueDate": "2026-03-21", "dueDays": 3, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-502" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-01-13", "daysToKev": 64, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": false, "sameDayOrBefore": false, "impact": "Remote Code Execution", "impactSource": "MSRC CVRF", "msrcDocument": "2026-Jan", "msrcFirstRevision": "2026-01-13", "msrcExploited": false, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely", "cvss": 9.8, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "crítica" }, { "cve": "CVE-2012-1854", "cveYear": 2012, "product": "Visual Basic for Applications (VBA)", "family": "office", "vulnerabilityName": "Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability", "title": null, "dateAdded": "2026-04-13", "dueDate": "2026-04-27", "dueDays": 14, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-426" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2012-07-10", "daysToKev": 5025, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": false, "sameDayOrBefore": false, "impact": null, "impactSource": null, "msrcDocument": null, "msrcFirstRevision": null, "msrcExploited": false, "msrcPubliclyDisclosed": false, "msrcExploitString": null, "cvss": 7.8, "cvssVersion": "cvssV3_1", "cvssSource": "CISA-ADP", "cvssBand": "alta" }, { "cve": "CVE-2023-21529", "cveYear": 2023, "product": "Exchange Server", "family": "exchange", "vulnerabilityName": "Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability", "title": "Microsoft Exchange Server Remote Code Execution Vulnerability", "dateAdded": "2026-04-13", "dueDate": "2026-04-27", "dueDays": 14, "ransomware": true, "forensicTriage": false, "cwes": [ "CWE-502" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2023-02-14", "daysToKev": 1154, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": false, "sameDayOrBefore": false, "impact": "Remote Code Execution", "impactSource": "MSRC CVRF", "msrcDocument": "2023-Feb", "msrcFirstRevision": "2023-02-14", "msrcExploited": false, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "cvss": 8.8, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "alta" }, { "cve": "CVE-2023-36424", "cveYear": 2023, "product": "Windows", "family": "windows", "vulnerabilityName": "Microsoft Windows Out-of-Bounds Read Vulnerability", "title": "Windows Common Log File System Driver Elevation of Privilege Vulnerability", "dateAdded": "2026-04-13", "dueDate": "2026-04-27", "dueDays": 14, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-125" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2023-11-14", "daysToKev": 881, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": false, "sameDayOrBefore": false, "impact": "Elevation of Privilege", "impactSource": "MSRC CVRF", "msrcDocument": "2023-Nov", "msrcFirstRevision": "2023-11-14", "msrcExploited": false, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "cvss": 7.8, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "alta" }, { "cve": "CVE-2025-60710", "cveYear": 2025, "product": "Windows", "family": "windows", "vulnerabilityName": "Microsoft Windows Link Following Vulnerability", "title": "Host Process for Windows Tasks Elevation of Privilege Vulnerability", "dateAdded": "2026-04-13", "dueDate": "2026-04-27", "dueDays": 14, "ransomware": true, "forensicTriage": false, "cwes": [ "CWE-59" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2025-11-11", "daysToKev": 153, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": false, "sameDayOrBefore": false, "impact": "Elevation of Privilege", "impactSource": "MSRC CVRF", "msrcDocument": "2025-Nov", "msrcFirstRevision": "2025-11-11", "msrcExploited": false, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely", "cvss": 7.8, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "alta" }, { "cve": "CVE-2009-0238", "cveYear": 2009, "product": "Office", "family": "office", "vulnerabilityName": "Microsoft Office Remote Code Execution", "title": null, "dateAdded": "2026-04-14", "dueDate": "2026-04-28", "dueDays": 14, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-94" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2009-02-25", "daysToKev": 6257, "publishedOnPatchTuesday": false, "addedOnPatchTuesday": true, "sameDayOrBefore": false, "impact": null, "impactSource": null, "msrcDocument": null, "msrcFirstRevision": null, "msrcExploited": false, "msrcPubliclyDisclosed": false, "msrcExploitString": null, "cvss": 8.8, "cvssVersion": "cvssV3_1", "cvssSource": "CISA-ADP", "cvssBand": "alta" }, { "cve": "CVE-2026-32201", "cveYear": 2026, "product": "SharePoint Server", "family": "sharepoint", "vulnerabilityName": "Microsoft SharePoint Server Improper Input Validation Vulnerability", "title": "Microsoft SharePoint Server Spoofing Vulnerability", "dateAdded": "2026-04-14", "dueDate": "2026-04-28", "dueDays": 14, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-20" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-04-14", "daysToKev": 0, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": true, "sameDayOrBefore": true, "impact": "Spoofing", "impactSource": "MSRC CVRF", "msrcDocument": "2026-Apr", "msrcFirstRevision": "2026-04-14", "msrcExploited": true, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected", "cvss": 6.5, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "media" }, { "cve": "CVE-2026-33825", "cveYear": 2026, "product": "Defender", "family": "defender", "vulnerabilityName": "Microsoft Defender Insufficient Granularity of Access Control Vulnerability", "title": "Microsoft Defender Elevation of Privilege Vulnerability", "dateAdded": "2026-04-22", "dueDate": "2026-05-06", "dueDays": 14, "ransomware": true, "forensicTriage": false, "cwes": [ "CWE-1220" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-04-14", "daysToKev": 8, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": false, "sameDayOrBefore": false, "impact": "Elevation of Privilege", "impactSource": "MSRC CVRF", "msrcDocument": "2026-Apr", "msrcFirstRevision": "2026-04-14", "msrcExploited": false, "msrcPubliclyDisclosed": true, "msrcExploitString": "Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation More Likely", "cvss": 7.8, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "alta" }, { "cve": "CVE-2026-32202", "cveYear": 2026, "product": "Windows", "family": "windows", "vulnerabilityName": "Microsoft Windows Protection Mechanism Failure Vulnerability", "title": "Windows Shell Spoofing Vulnerability", "dateAdded": "2026-04-28", "dueDate": "2026-05-12", "dueDays": 14, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-693" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-04-14", "daysToKev": 14, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": false, "sameDayOrBefore": false, "impact": "Spoofing", "impactSource": "MSRC CVRF", "msrcDocument": "2026-Apr", "msrcFirstRevision": "2026-04-14", "msrcExploited": true, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected", "cvss": 4.3, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "media" }, { "cve": "CVE-2026-42897", "cveYear": 2026, "product": "Microsoft", "family": "exchange", "vulnerabilityName": "Microsoft Exchange Server Cross-Site Scripting Vulnerability", "title": "Microsoft Exchange Server Spoofing Vulnerability", "dateAdded": "2026-05-15", "dueDate": "2026-05-29", "dueDays": 14, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-79" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-05-14", "daysToKev": 1, "publishedOnPatchTuesday": false, "addedOnPatchTuesday": false, "sameDayOrBefore": false, "impact": "Spoofing", "impactSource": "MSRC CVRF", "msrcDocument": "2026-May", "msrcFirstRevision": "2026-05-14", "msrcExploited": true, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected", "cvss": 8.1, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "alta" }, { "cve": "CVE-2008-4250", "cveYear": 2008, "product": "Windows", "family": "windows", "vulnerabilityName": "Microsoft Windows Buffer Overflow Vulnerability", "title": null, "dateAdded": "2026-05-20", "dueDate": "2026-06-03", "dueDays": 14, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-94" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2008-10-23", "daysToKev": 6418, "publishedOnPatchTuesday": false, "addedOnPatchTuesday": false, "sameDayOrBefore": false, "impact": null, "impactSource": null, "msrcDocument": null, "msrcFirstRevision": null, "msrcExploited": false, "msrcPubliclyDisclosed": false, "msrcExploitString": null, "cvss": 9.8, "cvssVersion": "cvssV3_1", "cvssSource": "CISA-ADP", "cvssBand": "crítica" }, { "cve": "CVE-2009-1537", "cveYear": 2009, "product": "DirectX", "family": "windows", "vulnerabilityName": "Microsoft DirectX NULL Byte Overwrite Vulnerability", "title": null, "dateAdded": "2026-05-20", "dueDate": "2026-06-03", "dueDays": 14, "ransomware": false, "forensicTriage": false, "cwes": [], "recordState": "PUBLISHED", "msrcCached": true, "published": "2009-05-29", "daysToKev": 6200, "publishedOnPatchTuesday": false, "addedOnPatchTuesday": false, "sameDayOrBefore": false, "impact": null, "impactSource": null, "msrcDocument": null, "msrcFirstRevision": null, "msrcExploited": false, "msrcPubliclyDisclosed": false, "msrcExploitString": null, "cvss": 8.8, "cvssVersion": "cvssV3_1", "cvssSource": "CISA-ADP", "cvssBand": "alta" }, { "cve": "CVE-2010-0249", "cveYear": 2010, "product": "Internet Explorer", "family": "ie", "vulnerabilityName": "Microsoft Internet Explorer Use-After-Free Vulnerability", "title": null, "dateAdded": "2026-05-20", "dueDate": "2026-06-03", "dueDays": 14, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-416" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2010-01-15", "daysToKev": 5969, "publishedOnPatchTuesday": false, "addedOnPatchTuesday": false, "sameDayOrBefore": false, "impact": null, "impactSource": null, "msrcDocument": null, "msrcFirstRevision": null, "msrcExploited": false, "msrcPubliclyDisclosed": false, "msrcExploitString": null, "cvss": 8.8, "cvssVersion": "cvssV3_1", "cvssSource": "CISA-ADP", "cvssBand": "alta" }, { "cve": "CVE-2010-0806", "cveYear": 2010, "product": "Internet Explorer", "family": "ie", "vulnerabilityName": "Microsoft Internet Explorer Use-After-Free Vulnerability", "title": null, "dateAdded": "2026-05-20", "dueDate": "2026-06-03", "dueDays": 14, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-399" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2010-03-10", "daysToKev": 5915, "publishedOnPatchTuesday": false, "addedOnPatchTuesday": false, "sameDayOrBefore": false, "impact": null, "impactSource": null, "msrcDocument": null, "msrcFirstRevision": null, "msrcExploited": false, "msrcPubliclyDisclosed": false, "msrcExploitString": null, "cvss": 8.8, "cvssVersion": "cvssV3_1", "cvssSource": "CISA-ADP", "cvssBand": "alta" }, { "cve": "CVE-2026-41091", "cveYear": 2026, "product": "Defender", "family": "defender", "vulnerabilityName": "Microsoft Defender Link Following Vulnerability", "title": "Microsoft Defender Elevation of Privilege Vulnerability", "dateAdded": "2026-05-20", "dueDate": "2026-06-03", "dueDays": 14, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-59" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-05-20", "daysToKev": 0, "publishedOnPatchTuesday": false, "addedOnPatchTuesday": false, "sameDayOrBefore": true, "impact": "Elevation of Privilege", "impactSource": "MSRC CVRF", "msrcDocument": "2026-May", "msrcFirstRevision": "2026-05-19", "msrcExploited": true, "msrcPubliclyDisclosed": true, "msrcExploitString": "Publicly Disclosed:Yes;Exploited:Yes;Latest Software Release:Exploitation Detected", "cvss": 7.8, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "alta" }, { "cve": "CVE-2026-45498", "cveYear": 2026, "product": "Defender", "family": "defender", "vulnerabilityName": "Microsoft Defender Denial of Service Vulnerability", "title": "Microsoft Defender Denial of Service Vulnerability", "dateAdded": "2026-05-20", "dueDate": "2026-06-03", "dueDays": 14, "ransomware": false, "forensicTriage": false, "cwes": [], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-05-20", "daysToKev": 0, "publishedOnPatchTuesday": false, "addedOnPatchTuesday": false, "sameDayOrBefore": true, "impact": "Denial of Service", "impactSource": "MSRC CVRF", "msrcDocument": "2026-May", "msrcFirstRevision": "2026-05-19", "msrcExploited": true, "msrcPubliclyDisclosed": true, "msrcExploitString": "Publicly Disclosed:Yes;Exploited:Yes;Latest Software Release:Exploitation Detected", "cvss": 4, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "media" }, { "cve": "CVE-2026-45659", "cveYear": 2026, "product": "SharePoint Server", "family": "sharepoint", "vulnerabilityName": "Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability", "title": "Microsoft SharePoint Remote Code Execution Vulnerability", "dateAdded": "2026-07-01", "dueDate": "2026-07-04", "dueDays": 3, "ransomware": true, "forensicTriage": true, "cwes": [ "CWE-502" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-05-22", "daysToKev": 40, "publishedOnPatchTuesday": false, "addedOnPatchTuesday": false, "sameDayOrBefore": false, "impact": "Remote Code Execution", "impactSource": "MSRC CVRF", "msrcDocument": "2026-May", "msrcFirstRevision": "2026-05-21", "msrcExploited": false, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely", "cvss": 8.8, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "alta" }, { "cve": "CVE-2026-56155", "cveYear": 2026, "product": "Active Directory Federation Services", "family": "other", "vulnerabilityName": "Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability", "title": "Active Directory Federation Services Elevation of Privilege Vulnerability", "dateAdded": "2026-07-14", "dueDate": "2026-07-28", "dueDays": 14, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-1220" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-07-14", "daysToKev": 0, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": true, "sameDayOrBefore": true, "impact": "Elevation of Privilege", "impactSource": "MSRC CVRF", "msrcDocument": "2026-Jul", "msrcFirstRevision": "2026-07-14", "msrcExploited": true, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected", "cvss": 7.8, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "alta" }, { "cve": "CVE-2026-56164", "cveYear": 2026, "product": "SharePoint Server", "family": "sharepoint", "vulnerabilityName": "Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability", "title": "Microsoft SharePoint Server Elevation of Privilege Vulnerability", "dateAdded": "2026-07-14", "dueDate": "2026-07-17", "dueDays": 3, "ransomware": false, "forensicTriage": true, "cwes": [ "CWE-306" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-07-14", "daysToKev": 0, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": true, "sameDayOrBefore": true, "impact": "Elevation of Privilege", "impactSource": "MSRC CVRF", "msrcDocument": "2026-Jul", "msrcFirstRevision": "2026-07-14", "msrcExploited": true, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected", "cvss": 5.3, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "media" }, { "cve": "CVE-2026-58644", "cveYear": 2026, "product": "SharePoint", "family": "sharepoint", "vulnerabilityName": "Microsoft SharePoint Deserialization of Untrusted Data Vulnerability", "title": "Microsoft SharePoint Remote Code Execution Vulnerability", "dateAdded": "2026-07-16", "dueDate": "2026-07-19", "dueDays": 3, "ransomware": false, "forensicTriage": true, "cwes": [ "CWE-502" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-07-14", "daysToKev": 2, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": false, "sameDayOrBefore": false, "impact": "Remote Code Execution", "impactSource": "MSRC CVRF", "msrcDocument": "2026-Jul", "msrcFirstRevision": "2026-07-14", "msrcExploited": true, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected", "cvss": 9.8, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "crítica" }, { "cve": "CVE-2026-50522", "cveYear": 2026, "product": "SharePoint", "family": "sharepoint", "vulnerabilityName": "Microsoft SharePoint Deserialization of Untrusted Data Vulnerability", "title": "Microsoft SharePoint Remote Code Execution Vulnerability", "dateAdded": "2026-07-22", "dueDate": "2026-07-25", "dueDays": 3, "ransomware": false, "forensicTriage": true, "cwes": [ "CWE-502" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-07-14", "daysToKev": 8, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": false, "sameDayOrBefore": false, "impact": "Remote Code Execution", "impactSource": "MSRC CVRF", "msrcDocument": "2026-Jul", "msrcFirstRevision": "2026-07-14", "msrcExploited": false, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "cvss": 9.8, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "crítica" }, { "cve": "CVE-2026-68820", "cveYear": 2026, "product": "Windows Ancillary Function Driver for WinSock", "family": "windows", "vulnerabilityName": "Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability", "title": "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability", "dateAdded": "2026-08-11", "dueDate": "2026-08-25", "dueDays": 14, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-416" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-08-11", "daysToKev": 0, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": true, "sameDayOrBefore": true, "impact": "Elevation of Privilege", "impactSource": "MSRC CVRF", "msrcDocument": "2026-Aug", "msrcFirstRevision": "2026-08-11", "msrcExploited": true, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected", "cvss": 7, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "alta" }, { "cve": "CVE-2026-33824", "cveYear": 2026, "product": "Internet Key Exchange (IKE) Service Extensions", "family": "windows", "vulnerabilityName": "Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability", "title": "Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability", "dateAdded": "2026-08-18", "dueDate": "2026-08-21", "dueDays": 3, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-415" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-04-14", "daysToKev": 126, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": false, "sameDayOrBefore": false, "impact": "Remote Code Execution", "impactSource": "MSRC CVRF", "msrcDocument": "2026-Apr", "msrcFirstRevision": "2026-04-14", "msrcExploited": false, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely", "cvss": 9.8, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "crítica" }, { "cve": "CVE-2026-55040", "cveYear": 2026, "product": "SharePoint", "family": "sharepoint", "vulnerabilityName": "Microsoft SharePoint Weak Authentication Vulnerability", "title": "Microsoft SharePoint Server Security Feature Bypass Vulnerability", "dateAdded": "2026-08-18", "dueDate": "2026-08-21", "dueDays": 3, "ransomware": false, "forensicTriage": true, "cwes": [ "CWE-1390" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-07-14", "daysToKev": 35, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": false, "sameDayOrBefore": false, "impact": "Security Feature Bypass", "impactSource": "MSRC CVRF", "msrcDocument": "2026-Jul", "msrcFirstRevision": "2026-07-14", "msrcExploited": false, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "cvss": 9.1, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "crítica" }, { "cve": "CVE-2019-1068", "cveYear": 2019, "product": "SQL Server", "family": "other", "vulnerabilityName": "Microsoft SQL Server Remote Code Execution Vulnerability", "title": "Microsoft SQL Server Remote Code Execution Vulnerability", "dateAdded": "2026-08-26", "dueDate": "2026-08-29", "dueDays": 3, "ransomware": false, "forensicTriage": true, "cwes": [], "recordState": "PUBLISHED", "msrcCached": true, "published": "2019-07-15", "daysToKev": 2599, "publishedOnPatchTuesday": false, "addedOnPatchTuesday": false, "sameDayOrBefore": false, "impact": "Remote Code Execution", "impactSource": "MSRC CVRF", "msrcDocument": "2019-Jul", "msrcFirstRevision": "2019-07-09", "msrcExploited": false, "msrcPubliclyDisclosed": true, "msrcExploitString": "Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A", "cvss": 8.8, "cvssVersion": "cvssV3_1", "cvssSource": "CISA-ADP", "cvssBand": "alta" }, { "cve": "CVE-2026-81963", "cveYear": 2026, "product": "Windows", "family": "windows", "vulnerabilityName": "Microsoft Windows Link Following Vulnerability", "title": "Windows Update Stack Elevation of Privilege Vulnerability", "dateAdded": "2026-09-08", "dueDate": "2026-09-22", "dueDays": 14, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-59", "CWE-284" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-09-08", "daysToKev": 0, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": true, "sameDayOrBefore": true, "impact": "Elevation of Privilege", "impactSource": "MSRC CVRF", "msrcDocument": "2026-Sep", "msrcFirstRevision": "2026-09-08", "msrcExploited": true, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected", "cvss": 7.8, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "alta" }, { "cve": "CVE-2026-85880", "cveYear": 2026, "product": "Windows", "family": "windows", "vulnerabilityName": "Microsoft Windows Heap-Based Buffer Overflow Vulnerability", "title": "Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability", "dateAdded": "2026-09-08", "dueDate": "2026-09-22", "dueDays": 14, "ransomware": false, "forensicTriage": false, "cwes": [ "CWE-122", "CWE-908" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-09-08", "daysToKev": 0, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": true, "sameDayOrBefore": true, "impact": "Elevation of Privilege", "impactSource": "MSRC CVRF", "msrcDocument": "2026-Sep", "msrcFirstRevision": "2026-09-08", "msrcExploited": true, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected", "cvss": 7.8, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "alta" }, { "cve": "CVE-2026-65660", "cveYear": 2026, "product": "SharePoint", "family": "sharepoint", "vulnerabilityName": "Microsoft SharePoint Code Injection Vulnerability", "title": "Microsoft SharePoint Server Remote Code Execution Vulnerability", "dateAdded": "2026-09-25", "dueDate": "2026-09-28", "dueDays": 3, "ransomware": false, "forensicTriage": true, "cwes": [ "CWE-94" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-08-11", "daysToKev": 45, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": false, "sameDayOrBefore": false, "impact": "Remote Code Execution", "impactSource": "MSRC CVRF", "msrcDocument": "2026-Aug", "msrcFirstRevision": "2026-08-11", "msrcExploited": false, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely", "cvss": 8.8, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "alta" }, { "cve": "CVE-2026-96951", "cveYear": 2026, "product": "Windows", "family": "windows", "vulnerabilityName": "Microsoft Windows Command Injection Vulnerability", "title": "Windows Shell Security Feature Bypass Vulnerability", "dateAdded": "2026-10-13", "dueDate": "2026-10-16", "dueDays": 3, "ransomware": false, "forensicTriage": true, "cwes": [ "CWE-77" ], "recordState": "PUBLISHED", "msrcCached": true, "published": "2026-10-13", "daysToKev": 0, "publishedOnPatchTuesday": true, "addedOnPatchTuesday": true, "sameDayOrBefore": true, "impact": "Security Feature Bypass", "impactSource": "MSRC CVRF", "msrcDocument": "2026-Oct", "msrcFirstRevision": "2026-10-13", "msrcExploited": true, "msrcPubliclyDisclosed": false, "msrcExploitString": "Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected", "cvss": 8.8, "cvssVersion": "cvssV3_1", "cvssSource": "CNA", "cvssBand": "alta" } ] }